Is Multi Factor Authentication still secure enough?

Attackers could also try to circumvent Multi Factor Authentication by intercepting the text messages containing the necessary second factor code. Hackers could also steal connections already made from hacked servers and then no longer need the MFA. Most MFA tools have a default period of 30 days before the user needs to be re-authenticated. But it can also happen that a vulnerability is found in the website that uses Multi Factor Authentication itself, as a result of which the MFA can suddenly be completely bypassed. In short, attackers are constantly coming up with new ways to outsmart and circumvent the authentication mechanism of websites.